$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa File: 6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa (raw, json) Hash identifier: AAx20tENt1MrbwdCJVxazvAwyWZx2jxv7uvRZv5KQeg= Subject key identifier: DE:08:11:CC:50:FF:B9:EB:5E:59:45:DB:69:36:B0:50:C4:F7:44:37 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858494733F1CCDC7B50DA4747BD20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 200428 IP address blocks: 2001:470:344::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:f1:cc:dc:7b:50:da:47:47:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=90e070c2-a175-4a47-9db6-b07b4c5aed5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:45:75:61:04:ed:ce:dc:bc:e5:7f:5e:43: 66:33:a0:f8:3e:26:f7:7a:dc:b1:76:d9:27:3f:67: 20:8e:67:7a:3a:fc:ad:73:d3:0f:a7:11:50:54:1a: 31:18:8b:22:a8:86:68:0a:2d:2e:6e:ec:c0:b5:8b: 47:14:81:6c:fb:81:7c:0d:2f:1d:9a:ef:b3:e7:48: 16:f8:31:a4:40:6f:e2:9d:72:1b:33:3c:a4:50:a4: ae:11:95:5c:43:6b:94:e2:14:a4:6c:20:e0:2b:69: ea:6c:99:d2:0b:10:04:c6:6b:1d:59:c2:ae:e8:52: 80:db:dc:8e:c4:7b:17:f7:01:b6:51:b3:a3:42:f0: 30:51:2f:eb:36:35:d2:72:3c:75:b5:ae:f8:60:8b: 56:8d:d3:09:32:8c:43:c2:7b:cd:31:fe:a2:85:4a: fe:a4:2f:8f:e4:e7:03:fb:1d:ba:59:8d:c3:a8:1c: 63:ae:0c:65:6b:a3:ac:2e:9a:65:4b:8e:4e:27:ac: 2a:96:a6:ee:4d:65:8f:11:8d:af:89:b9:7b:68:57: 63:12:26:f8:f0:7b:0b:3d:4d:31:2e:5a:97:7a:44: 05:7b:d9:bd:35:5d:e3:5e:d7:f9:26:3c:4f:03:bb: 28:15:80:cd:20:4b:e7:99:f5:a6:4a:b4:f9:7d:84: 11:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:08:11:CC:50:FF:B9:EB:5E:59:45:DB:69:36:B0:50:C4:F7:44:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6b94daf3-a315-3dbc-9fe0-12d85d5af7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:344::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:a2:4d:2a:f4:d7:3e:b4:eb:c6:ef:ed:9e:19:ce:c6:7c:3b: bc:91:74:ee:8e:3e:c1:a1:88:1a:c1:08:a4:6d:c1:55:a1:d9: ab:5b:77:62:76:3c:27:4d:5d:70:dc:16:16:62:00:43:94:22: e6:c0:b8:6d:96:af:2c:e4:8e:43:0a:ea:a5:b2:a1:3a:a1:d3: 80:6a:84:64:f3:0c:f6:71:d3:a6:39:c4:aa:14:2f:e5:35:a9: 76:1a:3d:36:a1:04:32:9f:c7:e1:70:64:0c:37:4e:1b:68:1b: c7:bc:f5:e4:19:92:2b:47:1a:65:c7:d4:22:cf:c8:2f:6a:1f: 45:62:ce:0e:29:60:9b:c0:52:a4:8d:bb:67:58:19:ed:c9:fe: 6e:de:73:90:a6:99:e7:ad:82:5b:35:d6:97:93:4f:b1:e4:86: 30:65:11:21:4e:2e:a5:9d:02:56:33:2a:3e:2c:b9:b6:7b:39: f2:93:1b:03:7c:14:60:42:3f:48:65:5b:8a:f2:d8:af:4d:7b: 9b:cd:aa:d4:8a:b9:c2:c4:14:b0:f5:7b:36:ce:03:68:47:1d: 3f:91:33:dd:41:f9:39:81:ca:8f:4d:ef:d0:de:2b:a3:b3:dc: bf:7f:8a:97:3d:73:f1:ff:0c:99:3d:25:9e:c6:26:71:ef:1a: 19:5f:ef:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElHM/HM3HtQ2kdHvSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk OTBlMDcwYzItYTE3NS00YTQ3LTlkYjYtYjA3YjRjNWFlZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugZFdWEE7c7cvOV/XkNmM6D4Pib3etyxdtkn P2cgjmd6Ovytc9MPpxFQVBoxGIsiqIZoCi0ubuzAtYtHFIFs+4F8DS8dmu+z50gW +DGkQG/inXIbMzykUKSuEZVcQ2uU4hSkbCDgK2nqbJnSCxAExmsdWcKu6FKA29yO xHsX9wG2UbOjQvAwUS/rNjXScjx1ta74YItWjdMJMoxDwnvNMf6ihUr+pC+P5OcD +x26WY3DqBxjrgxla6OsLpplS45OJ6wqlqbuTWWPEY2vibl7aFdjEib48HsLPU0x LlqXekQFe9m9NV3jXtf5JjxPA7soFYDNIEvnmfWmSrT5fYQRFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4IEcxQ/7nrXllF22k2sFDE90Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmI5NGRhZjMtYTMxNS0z ZGJjLTlmZTAtMTJkODVkNWFmN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMSiTSr01z6068bv7Z4ZzsZ8O7yRdO6OPsGhiBrBCKRtwVWh2atb d2J2PCdNXXDcFhZiAEOUIubAuG2WryzkjkMK6qWyoTqh04BqhGTzDPZx06Y5xKoU L+U1qXYaPTahBDKfx+FwZAw3ThtoG8e89eQZkitHGmXH1CLPyC9qH0Vizg4pYJvA UqSNu2dYGe3J/m7ec5Cmmeetgls11peTT7HkhjBlESFOLqWdAlYzKj4subZ7OfKT GwN8FGBCP0hlW4ry2K9Ne5vNqtSKucLEFLD1ezbOA2hHHT+RM91B+TmByo9N79De K6Oz3L9/ipc9c/H/DJk9JZ7GJnHvGhlf7/c= -----END CERTIFICATE-----Generated at Mon May 5 22:00:47 2025 by rpki-client